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Top Stories 

• Nissan Motor Company Ltd recalled nearly 34,000 model year 2015 Rogue sport utility 
vehicles December 12 due to a faulty shift selector knob that can cause the vehicle to 
unexpectedly move out of the park position. - Associated Press (See item 2 ) 

• The Santa Clara Valley Medical Center in San Jose announced December 13 that 368 
parents, 308 employees, and 350 infants were possibly exposed to tuberculosis at the 
hospital after an employee was suspected of having active tuberculosis. - CNN (See item 

16 ) 

• Security researchers from Bugsec Group and Cynet reported the flaw, FireStorm can 
exhausted enterprise-grade firewalls and extract data out of corporate networks via 
Transmission Control Protocol (TCP) handshakes.- Softpedia (See item 24 ) 

• Officials reported that bomb threats across three States in several malls prompted the 
evacuation of thousands of shoppers and prompted mall closures while police crews 
searched the buildings for explosive devices December 12. - Reuters (See item 26 ) 
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Energy Sector 



1. December 13, Associated Press - (Oregon) Winter storm knocks out power in 
southern, central Oregon. Crews worked to restore power to approximately 25,000 
customers in southern and central Oregon after a severe storm December 13 caused 
blizzard-like conditions that forced the closure of several stretches of highways. 

Source: 

http://www.oregonlive.com/weather/index.ssf/2015/12/winter storm knocks out pow 
er.html 



Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

2. December 12, Associated Press - (National) Nissan recalling recent Rogue models 
with shift defect. Nissan Motor Company Ltd announced the nationwide recall of 
nearly 34,000 model year 2015 Rogue sport utility vehicles December 12 due to a 
faulty shift selector knob that can cause the vehicle to unexpectedly move out of the 
park position. 

Source: http://www.wltx.com/storv/news/2015/12/12/nissan-recalling-recent-rogue- 
models-shift-defect/77206448/ 

3. December 11, TheCarConnection.com - (National) 2013-2015 Hyundai Genesis 
Coupe recalled to fix failing powertrains. Hyundai Motor Company announced 
December 11a nationwide recall for 10,800 model year 2013 - 2015 Hyundai Genesis 
Coupe vehicles with manual transmissions due to an increased crash risk resulting from 
2 manufacturing component issues, the differential and the suspension rear 
crossmember, which can lead to loose bolts if the components are not properly aligned 
during assembly. 

Source: http://www.thecarconnection.com/news/1101373 201 3-201 5-hyundai-genesis- 
coupe-recalled-to-fix-failing-powertrains 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

4. December 11, South Florida Sun-Sentinel - (National) Nine South Floridians charged 
in $6.6 million stock fraud. Federal prosecutors unsealed an indictment December 1 1 
charging 9 South Florida residents for allegedly netting $6.6 million in a fraudulent 



- 2 - 



stock investment scheme affecting 150 victims through Oxford City Football Club Inc. 
The group claimed that the business was profiting millions through its sports, 
education, media, and real estate acquisitions. 

Source: http://www.sun-sentinel.com/news/fl-fraud-oxford-citv-20151211-storv.html 

5. December 11, U.S. Securities and Exchange Commission - (National) SEC: Sports 
team offering is a penny stock fraud. Authorities from the U.S. Securities and 
Exchange Commission announced December 11 that Oxford City Football Club Inc., 
and its chief executive officer were charged for allegedly raising over $6.5 million from 
inexperienced investors who were misled to believe that the Florida-based penny stock 
company was profiting millions from sports teams, academic institutions, and real 
estate holdings through pressure tactics and a boiler room scheme. 

Source: http ://www . sec . gov/news/pressrelease/20 15-278 .html 

6. December 11, U.S. Department of Justice - (National) Former New York City 
corrections officer pleads guilty to multimillion dollar tax refund conspiracy. A 
New York resident pleaded guilty December 1 1 for his role in a scheme to defraud the 
Internal Revenue Service (IRS) of more than $3.4 million by submitting fraudulent 
1099-OID tax forms. The man worked alongside a former IRS employee and a third co- 
conspirator who collected fees from clients and supplied correspondence containing 
false claims to send to the agency. 

Source: http://www.iustice.gov/opa/pr/forrner-new-vork-city-corrections-officer- 
pleads-guilty-multimillion-dollar-tax -refund 

7. December 10, Newark Star-Ledger - (New lersey) 12 charged in ‘elaborate’ $3M 
credit card scheme, AG says. New lersey officials announced December 9 that 12 
foreign nationals and U.S. citizens were charged in connection to a credit card scheme 
that stole $3 million by passing bad checks and making fake credit card payments. The 
group would create false identities by pairing real Social Security numbers with phony 
names and birth dates to open checking accounts and credit cards online, which they 
would max out through shell companies. 

Source: 

http://www.ni.com/news/index.ssf/2015/12/12 charged in elaborate credit card sche 
me that st.html 



Transportation Systems Sector 

8. December 14, Mississippi News Now - (Mississippi) 18- wheeler overturns on 1-55 in 
Brookhaven. Officials closed all but one lane of Interstate 55 in Brookhaven for 
several hours December 13 while HAZMAT crews worked to clean up a diesel spill 
after a semi-truck overturned and jackknifed. No injuries were reported. 

Source: http://www.wdam.com/story/30736961/18-wheeler-overtums-on-i-55-in- 
brookhaven 

9. Decemberl3, Los Angeles times; Associated Press - (California) Northbound 
Interstate 5 reopens after mudslide; winter storm slams California. Northbound 
lanes of Interstate 5 in the Fort Tejon area were closed for approximately 3 hours 
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December 13 after harsh rains caused a mudslide. The storm also placed the Bay Area 
under a strong wind advisory and caused air traffic delays at the Oakland and San 
Francisco airports. 

Source: http://www.latimes.com/local/weather/la-me-ln-winter-storm-california-winds- 
snow-20151213-story.html 

10. December 13, The Oregonian - (Oregon) Firefighters battling large fire near 
Highway 30 in industrial NW Portland. Highway 30 in Portland was shut down for 
several hours December 13 while firefighters worked to contain a blaze that began after 
a semi-truck carrying fuel veered off the road and crashed into a line of train cars. 
Source: 

http://www.oregonlive.com/portland/index.ssf/2015/12/firefighters battling large in.ht 
ml 

11. December 13, Lufkin Daily News - (Texas) High winds blow train cars off trestle 
across Lufkin’s north loop. U.S. Highway 69 in Lufkin was closed for several hours 
December 13 while crews worked to remove several rail cars which had been blown 
onto the road by straight-line winds. 

Source: http://lufkindailvnews.com/news/communitv/article 99408f0c-alac-lle5- 
b4bc-df2fdc3ca2c3.html 



12. December 12, KSTU 13 Salt Lake City - (Utah) 4-car crash on Bangerter Highway 
ended with 1 woman in serious condition. Bangerter Highway in Taylorsville was 
closed for several hours December 12 while officials investigated the scene of a 4- 
vehicle crash that critically injured 1 person. 

Source: http://foxl3now.com/2015/12/12/lane-closures-on-bangerter-highway-due-to- 
moming-crash/ 

13. December 12, Durango Herald - (Colorado) Fatal crash closes Highway 550 south of 
Durango. U.S. Highway 550 in La Posta County was closed for several hours 
December 1 1 while officials investigated the scene of a fatal 4- vehicle crash that killed 

1 person and sent 4 others to the hospital. 

Source: 

http ://w w w .durangoherald.com/article/20 151211 /NEWSO 1 /15121991 5 &source=RSS 

14. December 12, First Coast News - (Florida) Police: Marked cruiser among 7 cars in 
wreck on Phillips. Southbound lanes of Phillips Highway in Jacksonville were shut 
down for several hours December 12 while officials investigated the scene of a 7- 
vehicle crash that sent 3 people to the hospital with injuries. Traffic Homicide 
detectives are investigating cause of the wreck. 

Source: http://www.firstcoastnews.com/storv/news/local/florida/2015/12/12/police- 
officer-involved-traffic-crash-on-phillips/7 7 207 7 04/ 

For another story, see item 1 
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Food and Agriculture Sector 

Nothing to report 

Water and Wastewater Systems Sector 

15. December 11, Imperial Beach Patch; City News Service - (California) Waters of 
Imperial Beach tainted; again. Authorities in Imperial Beach issued an ocean- 
pollution warning for Tijuana Slough National Wildlife Refuge and Border Field State 
Park December 1 1 due to an influx of rain-driven sewage. The alert covers the Pacific 
shoreline from the U.S. to Mexico border and to the southern terminus of Seacoast 
drive. 

Source: http://patch.com/califomia/imperialbeach/waters-imperial-beach-tainted-again 

Healthcare and Public Health Sector 

16. December 13, CNN - (California) 350 infants may have been exposed to 
tuberculosis at California hospital. The Santa Clara Valley Medical Center in San 
Jose announced December 13 that 368 mothers or parents, 308 employees, and 350 
infants were possibly exposed to tuberculosis at the hospital due to an employee who 
was suspected of having active tuberculosis. The employee was placed on leave in mid- 
November and officials stated that the risk of infection is low. 

Source: http://www.cnn.corn/2015/12/13/health/california-hospital-tuberculosis- 
exposure/index .html 

17. December 11, WXMI 17 Grand Rapids - (Michigan) West Michigan hospitals 
penalized for infections, conditions. The Centers for Medicare and Medicaid Services 
reported December 10 that 24 Michigan hospitals will receive reduced Medicare 
payments in 2016 for ranking in the bottom quarter for hospital acquired conditions or 
infections. 

Source: http://foxl7online.eom/2015/12/l 1/six-west-michigan-hospitals-penalized-for- 
infections-conditions/ 



Government Facilities Sector 

18. December 14, WAPT 16 Jackson - (Mississippi) Power outage closes Utica 
Elementary-Middle School. A severe storm December 13 knocked out power to areas 
of central Mississippi and forced the closure of Utica Elementary-Middle School 
December 14. 

Source: http://www.wapt.com/weather/power-outage-closes-utica-elementarymiddle- 
school/36952654 

19. December 12, Corvallis Gazette-Times - (Oregon) State parks closures. Storm 
damage and flooding in Oregon prompted the full or partial closure of several State 
parks, viewpoints, and recreation sites December 12 until further notice including, 
Williamette Mission State Park, Sarah Helmick State Park, Beverly Beach State Park, 
and South Beach State Park, among others. 
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Source: http://www.gazettetimes.com/news/local/state-parks- 
closures/article cOf4b989-a72f-57f7-8168-e6bbbd36b86f.html 



20. December 11, Niagara Gazette - (New York) No bomb found at county courthouse; 
caller sought. Police cleared the scene and deemed it safe 3 hours after a phoned bomb 
threat forced the evacuation of the Niagara County Courthouse in New York December 
1 1 . All court proceedings were canceled and authorities are investigating the incident. 
Source: http://www.niagara-gazette.com/news/local news/no-bomb-found-at-county- 
courthouse-caller-sought/article lf4260ba-3204-572b-8a64-54f2a0059ece.html 

Emergency Services Sector 

21. December 14, KWTV 9 Oklahoma City - (Oklahoma) Murder suspect escapes from 
Muskogee County jail. Authorities are searching for an inmate who escaped from the 
Muskogee County jail in Oklahoma December 13 by breaking out through a security 
window, climbing to the roof, and jumping to the ground. The inmate escaped with a 
second inmate who was recaptured. 

Source: http://www.news9.com/storv/30738533/murder-suspect-escapes-from-the- 
muskogee-county-jail 

Information Technology Sector 

22. December 14, SecurityWeek - (International) Twitter warns users of state sponsored 
hacking. Twitter reported December 14 that its customers’ user names, Internet 
Protocol (IP) addresses, phone numbers, and email addresses may have been 
compromised after a potential state sponsored attack occurred in its systems. Twitter 
officials advised users to use Tor Project, a software enabling anonymous 
communication, to protect affected users on social networks. 

Source: http://www.securitvweek.com/twitter-warns-users-state-sponsored-hacking 

23. December 12, Softpedia - (International) Malware spread via The Guardian’s 
Article on cybercrime. Researchers from FireEye discovered a report, hosted on The 
Guardian’s Web site about cybercrime, had a flaw in one of its links that was 
redirecting users to an Angler Exploit Kit installation that would search targets’ 
personal computers (PC) for the CVE-20 14-6332 flaw, which is a Windows Object 
Linking and Embedding (OLE) Automation Remote Code Execution vulnerability, 
triggered through VBScript. The Guardian is working to patch the vulnerability. 

Source: http://news.softpedia.com/news/malware-spread-via-the-guardian-s-article-on- 
cybercrime-4975 19.shtml 

24. December 11, Softpedia - (International) FireStorm vulnerability leaves next-gen 
enterprise firewalls open to attacks. Security researchers from Bugsec Group and 
Cynet reported a vulnerability, dubbed FireStorm, that can exhausted enterprise-grade 
firewalls and extract data out of corporate networks via Transmission Control Protocol 
(TCP) synchronize (SYN) packets by avoiding a full TCP connection, allowing the 
flaw to disguise its connection type, source, or target from corporate firewalls. 

Source: http://news.softpedia.com/news/firestorm-vulnerability-leaves-next-gen- 
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enterprise-firewalls-open-to-attacks-497481.shtml 



For another story, see item 25 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

25. December 14, SecurityWeek - (International) Wireless Routers plagued by 
unpatched flaws. Security researchers from Ethical Reporting discovered wireless 
SOHO routers from ZyXEL, Belkin, ReadyNet, Amped Wireless, Buffalo, and Netgear 
had several unpatched vulnerabilities including authentication bypass flaws, remote 
code execution flaws, default credential flaws, and DNS spoofing flaws, among other 
vulnerabilities, that can allow attackers to access potentially sensitive application 
program interface (API) and alter an infected device’s settings. 

Source: http://www.securitvweek.com/wireless-routers-plagued-unpatched-flaws 

Commercial Facilities Sector 

26. December 13, Reuters - (National) Malls in 3 U.S. states evacuated on busy holiday 
shopping day. Officials reported that bomb threats across three States in multiple malls 
including Largo Mall in Florida, Shops at Riverside in New Jersey, and the Animas 
Valley Mall in New Mexico, prompted the evacuation of thousands of shoppers and 
prompted mall closures while police crews searched the buildings for explosive devices 
December 12. Police found no traces of bomb devices in the facilities and reopened all 
the malls. 

Source: http://www.msn.com/en-us/news/us/malls-in-3-us-states-evacuated-on-busy- 
holiday-shopping-day/ar-BBntYWu?li=BBnb7Kz 

27. December 13, USA Today - (California) At fire-damaged mosque, man’s arrest 
comforts. Police arrested a suspect December 1 1 for suspicion of committing multiple 
felonies including commission of a hate crime, two counts of arson, one count of 
maliciously setting a fire, and one count of second-degree burglary after the man 
allegedly set fire to the Masjid Ibrahim Mosque in Coachella, California. Police are 
investigating the incident. 

Source: http://www.usatodav.com/story/news/nation-now/2015/12/13/fire-damaged- 
mosque-mans-arrest-comforts/77248840/ 

For another story, see item 24 
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Dams Sector 



Nothing to report 



NTAS 

NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikx.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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